documents and settings security

[Guest]

We have users that are new under XP and they can not create folders else
where on the C:\ and it was also preventing some in-house programme to run.
So what we did is to setup the C:\ to everyone full control like it was under
windows 2000. But what also happened is the documents and settings got
change to everyone full control. So which mean any one can delete other
user’s data. Is there a quick way to restore the original security settings
for the documents and settings and to leave the c:\ setup to full control for
everyone?

 

[Steven L Umbach]

You could try to use secedit as described in the link below to reset
security settings back to default defined levels and append /areas filestore
to the command and then change permissions on the folders as need be but
never select "replace entries on child objects" from the root folder. The
idea of giving everyone full control seems way excessive to me and not
keeping within the principle of least privilege for users. You might want to
look further at exactly where the user needs what permissions for what
folder. By default a regular user can create folders in the root folder.if
you look at special permissions and you may be able to tweak from there by
gradually giving the user more permissions there to see if you can make it
work. The second link below explains more on special permissions. ---
Steve

http://support.microsoft.com/default.aspx?scid=kb;EN-US;313222
http://support.microsoft.com/default.aspx?scid=kb;EN-US;308419 --- XP
special permissions